main

Reality Check: How Safe Is Linux?

malebolgia   on 12 June 2003 - 10:43 · 21 comments & 793 views

Advertisement (Why?)
It is not enough for an operating system to be low cost, reliable and capable of handling mission-critical applications. At some point in every OS's cycle of life, the question comes down to security and safety.

Ever since the entry of Linux into mainstream business computing, security gurus have been trying to measure its vulnerability to security breaches and attacks. They have even gone so far as to count the number of security alerts issued by Linux distributors to see how the numbers compare with those issued by Microsoft (Nasdaq: MSFT) for Windows servers.

A definitive answered has eluded the experts, but that has not prevented them from taking sides in what usually devolves into a religious war over open-source versus closed-source operating systems.

Still, the crucial question plagues companies considering whether to go the open-source route: Is Linux a safe, secure operating system that you can bet your business on? And if it does have flaws, where are they?

News source: NewsFactor


Tale of the Tape

It is unfair to compare the number of exploits of a Linux distribution like Red Hat (Nasdaq: RHAT) to Windows Server 2003 to determine whether Linux is safer than Windows, says Jan Hichert, CEO of Astaro, a Linux security solution developer. For one thing, there are more services running on a Linux distribution, Hichert told NewsFactor. But at the same time, attacks on Windows usually draw more attention, so it may seem like Windows is inherently less secure.

Post a comment · Send to friend Comments · There are 21 additional comments
#1 Quick Reply on 12 Jun 2003 - 10:48
it's fair to say that they're as good as each other really, being both a linux and windows user myself
#2 Mr. Black on 12 Jun 2003 - 12:15
I agree with Quick Reply above.
#3 Chicane-UK on 12 Jun 2003 - 13:57
Agreed.. they both have equal flaws and perks.
#4 Stryder68 on 12 Jun 2003 - 14:57
This is really no surprise. Over the last couple of years linux has made huge gains in users. Huge. So it only makes sense that it will now start being focused on for security exploits. You get popular, you get put under a microscope.

You also have to consider the amount of newer linux users who may not know how to secure their systems properly. One of the biggest security problems in Windows usually resides behind the keyboard, why should linux be any different.
#5 paulhaskew on 12 Jun 2003 - 18:37
ditto... i use both, both are as secure as you make them, and if you update often and use the other tools provided... me thinks you should be ok
(5 replies) #6 bilbobaggins on 12 Jun 2003 - 19:35
I think you all are missing an important point here. Linux is more a server os than a workstation os (well, it's good for both, and that's good). So if you want to really compare the two os than compare them as full-featured server os's, not some very subjectively chosen few features.

And if you build up and run a m$ server with full office, net/nat, web. e-mail, file sharing and transfer, printing, database etc. server and than compare it with a linux with the same functionality (and when you're at it sum up all the prices of m$ components which aren't included in a win release).

And iff (yes, double 'f') you do that, than you'll be able to tell some difference.

p.s.: hell, i have to smile when i think of exchange or outlook (just for an example) and know that there are people who actually think these are secure, stable and trustworthy (no offence)
#6.1 danlu on 12 Jun 2003 - 20:58
Oh, you are so l33t
#6.2 SomeDork on 13 Jun 2003 - 04:39
Your important point, cost, is not relevant in this topic.
Come to think of it, most of your facts are questionable too.
#6.3 bilbobaggins on 13 Jun 2003 - 13:17
I really didn't wanted to emphasize price that much...

Most of recent articles (fed up with them alright) compare a barenaked win+fixes with linux with it's metric tons of apps. And that's where I agree completely with Jan Hichert.

Why price turned up in my 2cents ? Not because I don't understand the issue, but because it's interesting to see how secure you get with m$ for all that money, and how secure you can get with linux for so less (but okay, let's drop this issue).

If you trust your win, so be it. I trust my linux more :7

And yes, I am l33t and I'm happy with it
#6.4 reddsoda on 14 Jun 2003 - 00:05
QUOTE (#6.0)
And if you build up and run a m$ server with full office, net/nat, web. e-mail, file sharing and transfer, printing, database etc. server and than compare it with a linux with the same functionality (and when you're at it sum up all the prices of m$ components which aren't included in a win release).

Umm, well yes the OS does cost. Why install office on a server? net/nat, web, file/print sharing are there by default. There are plenty of free or low cost email servers available. There are also free databases available.

And you're smiling because you beileve exchange and outlook ARE secure, stable and trustworthy, right? Because they are. If you don't believe so, then you can make a lot of money explaining this to the thousands of companies that believe that it is secure.
#6.5 bilbobaggins on 14 Jun 2003 - 06:20
"If you don't believe so, then you can make a lot of money explaining this to the thousands of companies" - No, thx, that would be a pretty hard job after millions of $ worth brainwashing.

"Why install office on a server?" - Okay, but then don't count flaws it's linux counterparts when one counts bugs and fixes (and that was just an example). Also, for how long and how good there has been iptables (just an example again) - the built-in filtering in recent wins.. oh, come on.

I would, yes, I really would agree on a decent comparison of the two kinds of OSes (despite being a linux user and fan for a long time) but only and only when they are compared as servers, and only apps and services would be compared which are supported by both sides (this again wouldn't tell everything, but would be a bit more realistic/appropriate IMHO).

p.s.: please don't take my cents as a wish for fighting, that was never my intention; just chating

(And before some1 comes and bashes me for not knowing/using win I have to tell that I also used every and each flavour of win since ages, not as a lame user, but as a developer. And I'm using them on a daily basis.)
(6 replies) #7 paulhaskew on 13 Jun 2003 - 02:30
no offence taken... just stating a fact that if you make your server/computer as secure as you can, your only as secure up till the next time someone finds a way in..
#7.1 kioria on 13 Jun 2003 - 06:36
as with Linux, Windows, unix...
#7.2 Dr.Dross on 13 Jun 2003 - 15:27
at least linux doesn`t have open holes like netbios file sharing

microsoft don`t care about security.... "security by obscurity" is their way to handle this

**** them
#7.3 insurektion on 13 Jun 2003 - 20:02
dumbass ^. both have strengths and weaknesses. Think of the stress testing MS's security has gone through being so popular. I would be willing to bet if the same amount of attention was focused to linux that you would see many more holes
#7.4 reddsoda on 13 Jun 2003 - 23:57
QUOTE (#7.2)
at least linux doesn`t have open holes like netbios file sharing

microsoft don`t care about security.... "security by obscurity" is their way to handle this

**** them

actually no. they have taken good security practices and applied them. the first was to turn off unnecessary services, and then they have recoded to fix flaws.

also, for win2000 clients and above, you can turn off netbios completely for file sharing.

enjoy linux and learn to promote it instead of bashing other OS's that you haven't kept up with.
#7.5 bilbobaggins on 14 Jun 2003 - 06:33
I agree with almost everything you all wrote above (both have weaks and strengths, security is what you make of it, etc.).

What disturbes me though is that when a linux-man tries to defend some of the best features and properties of a linux, he is almost every time told that he doesn't know Win enough so just stop.

When m$ promotes features and properties of it's Wins, that's called marketing and cheered upon.

"bashing other OS's that you haven't kept up with" - that doesn't seem the *nix way...
#7.6 JaggedFlame on 14 Jun 2003 - 20:30
That "linux-man" obviously didn't know what he was talking about, so they got on his case.
#8 dmd3x on 14 Jun 2003 - 21:41
My Linux and Windoze setups are safe, I can tell you that much.
#9 Sawyer12 on 15 Jun 2003 - 16:41
with the new linux kernel release it should be a bit more safe. see the neowin news post on the front page
#10 rafter109 on 16 Jun 2003 - 00:45
Can anyone here even put a non obscure definition on security? It seems to me that this has been eluding people for a long time. My definition for security is not "how many announcements have been made about flaws/exploits and other problems". My definition is "how easy is it for someone to gain access to your system". I am not much of a Windows fan, altho I do have an XP machine since i am a gamer, but it seems to me that the only reason the security of Windows OSes is frowned upon is because of the fact that there is a much much much wider user base, and with that comes a larger possibility that someone will find a problem and exploit it. I believe that if Linux, Unix, Apple, and many other OSes had the same user base that MS does, people will find problems in just about the same fashion.

Commenting has either been disabled on this article or you are not logged in. Click here to login or register, its free!

Note: Anonymous commenting is disabled in order to keep the quality of responses to a high standard.

Advertisement (Why?)